Hi friends.
As of today, we no longer consider CVE-2023-32001 to be a curl security
vulnerability.
The main advisory is updated accordingly:
https://curl.se/docs/CVE-2023-32001.html
The issue leading to the retraction is here:
https://github.com/curl/curl/issues/11530
The original HackerOne report leading to the original CVE is here:
https://hackerone.com/reports/2039870
The PR (now merged) that updates the documentation that mentions problems with
sharing directories with curl saves:
https://github.com/curl/curl/pull/11701
Thanks for flying curl. Never a dull moment.
--
/ daniel.haxx.se
| Commercial curl support up to 24x7 is available!
| Private help, bug fixes, support, ports, new features
| https://curl.se/support.html
--
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette: https://curl.se/mail/etiquette.html
